shelving 1.150.0 → 1.150.2

package/api/Endpoint.js

@@ -1,5 +1,5 @@
 import { getResponse } from "../util/http.js";
-import { UNDEFINED } from "../util/validate.js";
+import { UNDEFINED, getValid } from "../util/validate.js";
 /**
  * An abstract API resource definition, used to specify types for e.g. serverless functions.
  *
@@ -42,7 +42,9 @@ export class Endpoint {
         // Validate the payload against this endpoint's payload type.
         const payload = this.payload.validate(unsafePayload);
         // Call the callback with the validated payload to get the result.
-        const result = await callback(payload, request);
+        const unsafeResult = await callback(payload, request);
+        // Validate the result against this endpoint's result type.
+        const result = getValid(unsafeResult, this.result);
         // Convert the result to a `Response` object.
         return getResponse(result);
     }

package/package.json

@@ -11,7 +11,7 @@
 		"state-management",
 		"query-builder"
 	],
-	"version": "1.150.0",
+	"version": "1.150.2",
 	"repository": "https://github.com/dhoulb/shelving",
 	"author": "Dave Houlbrooke <dave@shax.com>",
 	"license": "0BSD",

package/util/http.js

@@ -117,8 +117,11 @@ export function getErrorResponse(reason, debug = false) {
     // Throw `RequestError` to set a custom status code (e.g. `UnauthorizedError`).
     const status = reason instanceof RequestError ? reason.code : 500;
     // Throw `Error` to return `{ message: "etc" }` to the client (but only if `debug` is true so we don't leak error details to the client).
-    if (debug && isError(reason))
-        return Response.json(reason, { status });
+    if (debug && isError(reason)) {
+        // Manually destructure because `Error.prototype.message` is not enumerable.
+        const { message, ...rest } = reason;
+        return Response.json({ message, ...rest }, { status });
+    }
     // Otherwise return a generic error message with no details.
     return new Response(undefined, { status });
 }